Associate - Security Operations (SOC) - Global Information Security

About the role

The role will be responsible for monitoring and analyzing security alerts across SIEM, EDR, network, cloud, and identity platforms; investigating high-severity security incidents; and supporting end-to-end incident response. The individual will also contribute to detection engineering, threat hunting, DLP monitoring, and continuous improvement of Jefferies’ security monitoring and response capabilities.

What you'll do

• Monitor and analyze security alerts from SIEM, EDR, firewalls, IDS/IPS, cloud platforms, and identity systems
• Conduct detailed investigations into high-severity security incidents, including phishing, malware, lateral movement, data exfiltration, and related threats
• Lead end-to-end incident response activities, including containment, eradication, recovery, and post-incident documentation
• Develop and fine-tune SIEM correlation rules, EDR detections, and alerting policies to reduce false positives and improve detection coverage
• Execute proactive threat hunting using the MITRE ATT&CK framework and IOCs across endpoints, network, cloud, and identity logs

What you need

• 4–7 years in cybersecurity
• Incident response
• SIEM
• EDR
• DLP
• Firewalls
• Capital markets
• B.Tech or B.E. or B.Sc or BCA

Good to have

• CEH
• Investment banking